Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
  • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
  • H04L63/0492—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• • G—PHYSICS
  • G05—CONTROLLING; REGULATING
  • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
  • G05B1/00—Comparing elements, i.e. elements for effecting comparison directly or indirectly between a desired value and existing or anticipated values
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
  • H04L63/0853—Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/06—Authentication
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/06—Authentication
  • H04W12/068—Authentication using credential vaults, e.g. password manager applications or one time password [OTP] applications
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
  • H04L2463/082—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying multi-factor authentication

Definitions

• the invention relates to a wireless device, configured for ensuring authentication of a user.
• Wireless devices such as Smartphones
• smartphones are more and more replacing various other daily items individual persons carry along with them ranging from credit cards to home keys.
• a home door is opened or an item is bought from a shop by swiping a mobile device, such as a phone, next to a receiver and optionally inserting a PIN code or a password on the phone. If the Smartphone is stolen or lost somewhere, anyone finding it could make payments or open doors on behalf of the rightful owner. Instead of having merely the possession of the
• Smartphone some form of extra security is required for authenticating the correct user.
• a simple solution is to use a PIN code or a password on the device every time it is used but this is rather tedious since it requires user interaction and additionally remembering passwords or PIN codes, respectively.
• a bystander may see the password or recognize the PIN code and if he or she steals the phone, he or she could have access to everything that is authenticated with the phone and the password.
• a wireless device configured for ensuring authentication of a user, comprising a checking unit configured for scanning a distance to a reference unit and for checking if the distance scanned lies within a predetermined range such that authentication of the user is ensured.
• the wireless device preferably corresponds to a Smartphone or to a mobile device, such as a cell phone, or to any other equipment, such as a wristwatch or jewellery.
• the checking is preferably done by using radio techniques such as radio-frequency identification, RFI D for short, in near field communication, NFC for short, applications,
• the term “scanning a distance” means that a distance between the two units is measured, wherein the measurement can be performed in different ways. Preferably the measurement is done in certain predefined time intervals which repeat themselves in equidistant or non-equidistant steps or the measurement is performed constantly. It is also possible that the measurement is performed once during a predefined time period dependent on an action of a user.
• the checking unit is further configured for running a cryptographic challenge-response protocol which requests the reference unit to prove its identity using a shared secret cryptography and/or a public key cryptography while scanning the distance to the reference unit such that it is ensured that the wireless device and the reference unit are assigned to each other.
• the wireless device is thus reliable since the reference unit preferably signs a portion of data provided by the checking unit using a private key or a shared secret cryptography.
• the reference unit preferably proves by signing with its private key that it is the legitimate holder of the public key identity.
• the cryptographic challenge- response protocol requests a public key identity of the reference unit and the public key identity of the reference unit matches the public key identity stored at the checking unit.
• the matching it is preferably ensured that no attacker can pretend to be the reference unit since it is checked that the device with the right identification, I D for short, is present, for instance by additionally asking for a PIN code or for a password or by scanning an object which is in close proximity to identify predefined spatial features of the object.
• the predetermined range is selected by pairing the checking unit with the reference unit in such a way that the checking unit requests the position of the reference unit before calculating the distance between the reference unit and the checking unit.
• position refers to an "absolute position” but can also refer to a "relative position” dependent on the actual context or situation.
• Such a pairing can also be used in Bluetooth applications, also called Bluetooth pairing, and works in a first step with teaching, for instance, a phone that a headset is associated with it and, in a second step, the headset is taught that the phone is bonded to it.
• the predetermined range is adjusted by varying the radio power level at the checking unit and measuring the position of the reference unit such that the distance between the reference unit and the checking unit is extracted and compared with predetermined reference data.
• the predetermined reference data preferably comprises the predetermined range and is preset by previous measurements and/or preset to a range which is based on empiric values. An actual measurement may change the predetermined range such that it is adjusted to a different range fitting to the actual measurement result.
• the checking unit is further configured for detecting that at least one security unit is arranged within the predetermined range to the reference unit.
• the wireless device is able to check that a plurality of additional security devices, ASDs for short, are arranged in its vicinity to make sure that the wireless device is still with its rightful owner.
• ASDs additional security devices
• the wireless device preferably uses short range radio and contacts the ASDs.
• the wireless device preferably checks that the plurality of ASDs is in close proximity to a reference unit or the wireless device performs a cryptographic challenge-response protocol to make sure that there is no attacker pretending as one of the ASDs.
• the ASDs are preferably integrated into other items that the user is carrying along anyway, such as into a wristwatch or into jewellery, or the ASD is a separate device, such as a key fob or a key chain.
• the at least one security unit is configured for sending a command to an application unit which is configured for running a program ensuring authentication of the user, wherein the application unit is integrated into the wireless device.
• the checking unit is preferably further configured for requesting a password and/or a PIN code from the user and/or for performing biometric recognition, such as voice recognition, fingerprint recognition and/or retina recognition.
• biometric recognition such as voice recognition, fingerprint recognition and/or retina recognition.
• the at least one security unit is integrated into the wireless device. Therefore, the wireless device can be built very compact.
• the at least one security unit is integrated into a wristwatch, into jewellery, into clothing, into luggage, into a laptop, into a key fob or into a key chain.
• the security unit is positionable anywhere outside the wireless device and thus security further increases.
• a reference unit configured for ensuring authentication of a user of the wireless device according to the first aspect of the invention, wherein the reference unit is integrated into clothing, such as a hat, a shirt or underwear.
• the reference unit is not only allowed to be arranged at a fixed position but can also be carried along with the user.
• a method for ensuring authentication of a user comprising the steps of: a) scanning a distance to a reference unit and b) checking if the distance scanned in step a) lies within a predetermined range such that authentication of the user is ensured.
• the method further comprises the step of detecting that at least one security unit is arranged within the predetermined range to the reference unit.
• the method preferably further comprises the step of sending a command to an application unit which is configured for running a program ensuring authentication of the user.
• Fig. 1 shows a wireless device according to a first preferred embodiment of the invention
• Fig. 2 illustrates the steps of a method for ensuring authentication of a user according to a second preferred embodiment of the invention.
• Fig. 3 schematically illustrates the steps of the method according to the second preferred embodiment of the invention.
• Fig. 1 shows a wireless device configured for ensuring authentication of a user according to a first preferred embodiment of the invention.
• the wireless device 1 comprises a checking unit 2 which scans a distance to a reference unit 3 which is not part of the wireless device 1 . Furthermore, the checking unit 2 checks if the distance measured lies within a predetermined range such that authentication of the user is ensured.
• the predetermined range is set to an empirical value in this first preferred embodiment.
• the checking unit 2 measures a distance to the reference unit 3 which lies outside the wireless device 1 and compares the result with previous measurement results stored in a database in this first preferred embodiment.
• the reference unit 3 corresponds to a passive RFID chip which does not need any battery and is arranged at a fixed position on a ground.
• the reference unit 3 is integrated into underwear. Furthermore, the checking unit 2 detects one security unit 4 that is arranged within the predetermined range to the reference unit 3. This way it is guaranteed that the measurement results are verified which increases security.
• the security unit 4 sends a command to an application unit 5 which runs a program and is integrated into the wireless device 1 .
• the application serves for opening a door in this first preferred embodiment of the invention.
• Fig. 2 schematically shows a method for ensuring authentication of a user according to a second preferred embodiment of the invention. Initially, i.e. before a predetermined action, such as walking to a door and opening the door is performed, a Smartphone is paired with a headset and a key is exchanged.
• a proximity measurement between the checking unit 2 and the reference unit 3 as in the first preferred embodiment is performed and based on the result of this step the door is opened or it is refused to be opened. Basically, it is checked if the user is near the door. If yes, the distance to the reference object 3 is measured. If the reference object 3 is nearby, the door is opened and the method reaches its end. If the door is not nearby the method can also reach its end. Alternatively, if the distance to the reference object cannot be measured regardless for whatever reason, a PIN code is asked for and if the PIN code is verified, then the door is opened. Otherwise the method also reaches its end. Hence, security for Smartphone-based transactions and authorization is increased.
• a dynamic security level is adjustable, i.e. if required after detecting a number of ASDs it is further asked for a pin code, for a password and/or voice recognition or similar measures are performed.
• Fig. 3 schematically illustrates the steps of the method according to the second preferred embodiment of the invention.
• a first step the distance to a reference unit is scanned 6.
• the checking step 7 it is controlled whether the distance scanned in the first step 6 lies within a predetermined range.
• a command is sent 9 to an application unit which is configured for running a program ensuring authentication of the user.
• one application and one Bluetooth device is used.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Computing Systems (AREA)
• General Engineering & Computer Science (AREA)
• Computer Hardware Design (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Automation & Control Theory (AREA)
• Mobile Radio Communication Systems (AREA)
• Telephone Function (AREA)
• Lock And Its Accessories (AREA)

Priority Applications (6)

Applications Claiming Priority (1)

Publications (1)

Family

ID=47326076

Family Applications (1)

Country Status (6)

Families Citing this family (9)

Citations (3)

Family Cites Families (21)

• 2012
  • 2012-11-16 EP EP12798637.0A patent/EP2920936A1/en not_active Withdrawn
  • 2012-11-16 MX MX2015004817A patent/MX2015004817A/es unknown
  • 2012-11-16 JP JP2015542174A patent/JP2016506101A/ja active Pending
  • 2012-11-16 WO PCT/EP2012/072837 patent/WO2014075734A1/en active Application Filing
  • 2012-11-16 CN CN201280077091.8A patent/CN104782096A/zh active Pending
  • 2012-11-20 US US13/682,030 patent/US9030290B2/en active Active

Patent Citations (3)

Non-Patent Citations (4)

Also Published As

Similar Documents

Legal Events